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Abstract. Modal logics are widely used in computer science. The com- 
plexity of their satisfiability problems has been an active field of research 
since the 1970s. We prove that even very "simple" modal logics can be 
undecidable: We show that there is an undecidable modal logic that can 
be obtained by restricting the allowed models with a first-order formula 
in which only universal quantifiers appear. 



1 Introduction 

Modal logics are widely used in many areas of computer science. See, for example, 
[BZ05,FHJ02,CDF03,HMT88,LR86b,BG04,Moo03,ABvdT10] . The complexity 
of modal satisfiability problems has been an active field of research since Lad- 
ner's work in the 1970s [Lad77]. Early work focused on the complexity of single 
logics, but more recent work has focused on handling the computability and 
complexity for an infinite number of logics, see, e.g., [HS08,DK98,AvBN98]. 

Our ultimate goal is to classify the complexity of "all" modal logics. We 
are particularly interested in elementary modal logics, i.e., modal logics whose 
models are defined by a first-order formula, since modal logics used in practice 
are often defined in this way. In addition, complexity analysis is often easier 
when looking at models rather than at axioms. 

An important first step towards classifying the complexity of all elementary 
modal logics is to determine which modal logics are decidable. Our concrete goal 
in this paper is to find a "simplest" undecidable modal logic. 

A particularly interesting simple class of elementary modal logics are the 
universal elementary modal logics, in which the class of models is defined by a 
universal first-order formula. Not only do many common modal logics belong 
to this class, it is also a class that is on the borderline of being decidable. In 
particular, it is known that many universal Horn elementary uni-modal logics are 
in PSPACE, and it is conjectured that all these logics are decidable [IIS08]. On 
the other hand, it is known that global satisfiability, i.e., satisfiability in all worlds 
in a model, is undecidable for universal elementary uni-modal logic [IIem96] . 
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To show undecidability for modal logics, we typically need to be able to make 
the models look like a grid, and we need a way to access all the worlds in the grid, 
as well as a way to access the two direct successors of a world. An early example 
of this is that 2-dimensional temporal logic on N x N with modal operators 
Oil and Or that access the direct "up" and "right" successors of a world, and 
□„ and Oj. that access all worlds that are above or to the right of the current 
world is undecidable [Har83]. The undecidability also holds if □„ and are 
the only modal operators [Spa90]. Other examples of undecidable modal logics 
include various logics of knowledge and time [HV89,LR86a,Spa90], various logics 
that allow identification of worlds [BS93,GG93], and most products of transitive 
modal logics [GKWZ05]. 

All these logics are multi-modal and certainly not universal. As will be ex- 
plained in Section 5.1, universal first-order formulas are not enough to enforce 
a grid-like structure. Still, there exists a first-order universal formula such that 
global satisfiability for uni-modal logics is undecidable [Hem96] . Section 3 will 
explain the idea behind the construction from [Hem96] and why this construc- 
tion can not be used to show that satisfiability for a universal elementary modal 
logic is undecidable. 

However, using a much more complicated construction (see Section 5.1 for a 
high-level overview and the rest of Section 5 and the appendix for details), we 
will show that there exists an undecidable universal elementary uni-modal logic. 
And this result holds even if we are not allowed to use the equality predicate in 
the first-order universal formula describing the models. And so we have indeed 
found a "simplest" undecidable modal logic. 

2 Preliminaries 

Modal logic syntactically extends prepositional logic with an additional unary 
operator □ (a dual operator abbreviates -iQ-i). The modal depth of a formula 
<f, denoted with md {(p), is the maximal nesting degree of the D-operator in ip. A 
model for a modal formula is a graph with individual prepositional assignments. 
To be precise, a frame F is a directed graph {W,R), where the vertices in W 
are called "worlds." A model M = (W, R, tt) consists of a frame (W, R) and a 
function tt assigning to each variable the set of worlds in which x is true. We 
say the model M is based on the frame {W, i?). If is a class of frames, then 
a model is an J^-model if it is based on a frame in J". We often write w € M 
instead oi w G W. For a world w G M, we define when a modal formula (j) is 
satisfied at w in M (written M,w \= (j))- If ^ is a variable x, then M,w |= ^ if 
and only if w € 7r(x). As usual, M, w \= (f)i A(f)2 if and only if M, w |= (pi and 
M, w 1= 02 , and M, w |= -i0 iff M, w ^ (j). For the modal operator, M,w \= Dc^i 
if and only if M,w' \= (j) for all worlds w' with {w,w') G R. 

A standard way to define classes of frames is to use first-order formulas. The 
frame language is the first-order language containing (in addition to Boolean 
operators) the binary relation R, interpreted as the edge relation in the graph, 
and the equality relation =. The semantics are defined in the obvious way. For 



example, a frame satisfies the formula (^trans := \/xyz{xRy A yRz =^ xRz) 
if and only if it is transitive. We use " to denote first-order formulas, e.g., (p 
is a first-order formula, while (j) is & modal formula. We say that a frame is a 
t/'-frame if it satisfies the first-order formula xj}. We say that a model M is a 
f/'-model (which we write as M \= ili) \i M is based on a ■i/j-frame. The basic 
frame language is the frame language without equality. 

Following notation introduced in [If SOS], for a first-order formula if), K(^/)) 
is the logic in which a modal formula is satisfiable if and only if there is a 
il)-moc\c\ M and a world w G M such that M, w \= c6. Such logics are called 
elementary modal logics. For a formula tl) over the frame language, we consider 
the following problem: 

Problem: K{^)-SM 

Input: A modal formula (j) 

Question: Is there a f/^-model M and a world w € M with M, w \= (f>7 

As an example, the problem K((^trans)-SAT is the problem of deciding if a 
given modal formula can be satisfied in a transitive frame, and is the same as the 
satisfiability problem for the logic K4. We say that a modal formula is globally 
satisfied in a model if it holds at every world in the model. 

The main result of this paper is that there exists a universal first-order 
formula y>^"*' over the basic frame language such that K(<,2i*^"'*')-SAT is coRE- 
complete. 



3 Relation with previous work 

The result from the literature closest to ours is Theorem 3.2 from [Hem96], which 
shows the coRE-hardness of global modal satisfiability for the class of frames 
defined by the following first-order universal formula (we omit quantification 
from first-order formulas, since in this paper every variable in every appearing 
first-order formula is universally quantified): 

{{xRyi A xRy2 A xRys) {{yi = 2/2) V {yi = 2/3) V (2/2 = 2/3))) A 

(f\ {xRyi A yiRzi) =^ \J {zi = Zj) j . 
l<i<4 l<i<j<4 j 

Our result strengthens the above result in several ways: We prove undccid- 
ability already for the (local) satisfiability problem, i.e., given a modal formula 
if, decide whether there is a model and some world in it that satisfies (p. Sat- 
isfiability is often much easier than global satisfiability: In the above example 
from [Hem96], (local) satisfiability is in NP, while global satisfiability is unde- 
cidable. Intuitively, proving undecidability of the global satisfiability problem 
by encoding the grid is easier than undecidability for the local problem due to 
the following: A key property of the grid that needs to be enforced in the con- 
struction is that every world in a model has a specific set of reachable worlds 



(each world has exactly two successors reachable in one step, and three worlds 
that it can reach in two steps). Clearly, enforcing the existence of successors 
is impossible using only universally quantified formulas. With a modal formula 
however, requiring at least two direct successors can be enforced very easily by 
using a formula ()u A ()u. In the global satisfiability problem, one can require 
this formula to globally hold in the model, and hence enforce the existence of 
the grid structure relatively easily. In the (local) satisfiability problem however, 
there is no way to require this formula to globally hold in the model. This is 
the main reason why, at least in the context of classes of frames defined by uni- 
versal first-order formulas, the global satisfiability problem allows us to express 
"positive" conditions (such as the existence of at least two successors) in a much 
more easy way than the satisfiability problem. 

In our proof, we employ some of the techniques used to obtain the above- 
mentioned result in [IIem96]. In particular, the first step in our proof is to estab- 
lish undecidability of the global satisfiability problem over a class of frames that 
is similar to the one defined by the above formula. However, this step does much 
more than simply reproving the result from [Hem96] : The class of frames that we 
construct here is considerably less restrictive than the one defined above. One 
reason for this is that with the more restricted language we have available (the 
basic frame language, which does not contain equality), we cannot restrict our 
frames as strongly as with the above formula from [Hem96]. More importantly 
however, we need to construct a class which then can serve as the basis for prov- 
ing hardness of (local) satisfiability. Therefore, we construct a class of frames that 
is tailor-made for being able to prove our main result later. A key issue here is 
that of reflexivity: In contrast to the grid model, we establish undecidability for 
a class of frames that includes reflexive frames — in fact, the reflexive frames are 
those which will later allow us to reduce the global satisfiability problem to the 
(local) satisfiability problem. In particular, directly reducing global satisfiability 
for the class of frames defined by the formula above to (local) satisfiability for 
a class of frames defined by a universal first-order formula over the basic frame 
language does not appear to be easier than our approach. 

Technically, in addition to our first-order formulas being more complex than 
those used in [Hem96], a main difference is the use of what we call abstraction 
of a model: Essentially, our first-order formulas enforce the relevant conditions 
of the grid not in a model M itself, but in a model ^/r^ obtained from M by 
compressing cliques of worlds into a single world. 

4 Main Result 

We show that modal satisfiability is undecidable already for a formula over the 
basic frame language in which every appearing variable is universally quantified: 

Theorem 1. TJiere exists a universal first- order formula iffi'^°-^ over the basic 
frame language such that K((^-'^"''')-SAT is coKEi- complete. 

It is well known and easy to show that modal satisfiability for a class of frames 
defined by a first-order formula is in coRE since this problem can be phrased as 



the negation of a first-order implication (see, e.g., [BdRVOl, Lemma 6.32]). It 
therefore remains to construct ip^'^^^ such that K{iffi'^'^^)-SAT is coRE-hard. 

We also mention that as an immediate corollary of the above, we obtain the 
following result: The uniform version of the satisfiability problem, in which both 
the modal and the first-order formula are given in the input, is coRE- complete. 

5 Proof of the main result 

5.1 Global satisfiability in the grid model 

We prove coRE-hardness by a reduction from the global grid satisfiability prob- 
lem: The grid frame has world set N x N, and the accessibility relation R = 
{{{i,j), {i + 1, j)), ((*, j), {i + I *)i € N}. A grid model is a model based on 
the grid frame. The global grid satisfiability problem is the following: 

Problem: Global-Grid-Sat 

Input: A modal formula ip 

Question: Is there a grid-model M that globally satisfies tp7 
In [Hem96] , the following theorem was proven: 

Theorem 2. Global-Grid-Sat is coKE-hard, even restricted to inputs ip with 
md (-0) < 1. 

Our proof will force models to behave "essentially grid-like." However, it is 
immediately clear that universal first-order formulas are not expressive enough 
to accomplish this: It is easy to see that if _F is a frame, and F' is a subframe 
of F (i.e., an induced subgraph), then F' satisfies every universal first-order 
formula over the frame language that F satisfies. More precisely, universal first- 
order formiilas with equality can express exactly those graph properties that can 
be characterized with a finite forbidden subgraph. Hence with equality in our 
first-order language, we can express properties like "each world has at most two 
direct successors," which is a characteristic property of the grid frame, using the 
formula {xRyi A xRy2 A xRys) {{yi = 2/2) V (yi = 2/3) V (2/2 = 2/3))- Note 
that, as explained in Section 3, this formula was used in the proof of [Hem96, 
Theorem 3.2]. 

As mentioned previously, requiring "positive" conditions, e.g., that every 
world in a model has direct successors with certain properties, is reasonably easy 
in the global satisfiability setting, but considerably more difficult in the local 
setting. In addition, even the above property of having at most two distinct 
successors cannot be expressed by a universal first-order formula in the basic 
frame language, i.e., the frame language without equality: It is easy to see that no 
such formula can distinguish the singleton with two successors from the singleton 
with three successors. 

Therefore, in order to simulate the grid in our modal models, we need to 
exploit the interplay between the first-order and the modal aspect of the satis- 
fiability problem. The main ingredients to our proof are the following: 



1. In order to circumvent having to express equality in the above formula, we 
employ the following construction: We use a first-order formula similar to 
the one above, except that instead of requiring t/j = yj, we demand that 
there is a symmetric edge between these worlds with the first-order formula 
(yiRyj) A (yjEyi). With some additional requirements, we ensure that the 
relation x ^ y \s an equivalence relation, where x ^ y holds if there is a 
symmetric edge between x and y. We then "abstract" modal models to their 
^-equivalence classes. This construction allows us to "simulate" equality in 
the basic frame language. On the abstraction we can therefore express all 
"forbidden subgraph" properties of the grid, since as mentioned above, these 
properties can be expressed using universal first-order formiilas with equality. 

2. In order to ensure that the above-mentioned abstraction is soimd, we use 
modal formulas to ensure that the relation ~ is not only an equivalence 
relation, but also respects propositional assignments: For a relevant subset 
of variables, ^-equivalent worlds will share the same valuation. This allows 
us to regard equivalence classes as single worlds in the abstracted model. 

3. For the structure of the model, it remains to express the "positive" properties 
of the grid, for example that every world indeed has two distinct successors. 
While the existence of successor worlds can be easily required with the modal 
operator (which in this step of the proof we can essentially use "globally" 
as we are still only dealing with the global satisfiability problem) , we need to 
ensure that there exist successors in a different equivalence class — i.e., suc- 
cessors that arc still present in the abstraction. We express this requirement 
using subtle interplay between first-order and modal requirements. 

4. Finally, the most important issue is to express the global requirement of 
Global-Grid-Sat: The formula -0 is required to hold at every world of the 
grid, whereas modal satisfiability is an existential property. To solve this, we 
force the existence of a "universal" world, i.e., a world connected to every 
other world. In this world, the global requirement "t/i must hold everywhere" 
can be simulated with the (local) □ operator. In this part of the proof, we 
crucially rely on features of the class of models considered in the first part, 
which allow us to perform this construction. 

5.2 Expressing the grid: Universal first-order aspects 

We follow the proof strategy outlined above, and start by defining a set of uni- 
versal first-order formulas that force the "abstraction" of a model to obey some 
essential properties of the grid. The formulas are intuitively understood best 
when thinking of symmetric edges as "equality." As mentioned above, we use 
x ^ y to express that in a frame, there is an edge from x to y, and one from y 
to X (the frame will always be clear from the context). We also use a; ~ y as an 
abbreviation for {xRy A yRx) in formulas. 

Definition 1. Let (pistep be the universal first-order formula 




This formula corresponds to the property mentioned above: In the grid, each 
world has only two distinct successors. When reading ~ as equality, the formula 
exactly captures this requirement. We use an analogous approach to state an- 
other important feature of the grid: While each world has two distinct successors, 
say 2/1 and j/2, and each of these again has two distinct successors, say zl, Z2, 
and Z2, in the grid each world can reach only three distinct worlds in two steps. 
Hence, two of the Zj must coincide. This is expressed by the following formula: 

Definition 2. Let (p2-step be the universal first- order formula 



/\ {xRyi A ViRzi) \ ^ \ \/ (x ^ yi) V \/ {yi Zi) V \/ {zi ~ zj) 

^l<i<4 J \l<i<4 1<«<4 l<i<j<4 

When reading ~ as equality, this formula states that if zi, 22, Z3, Z4 are worlds 
reachable from x via intermediate worlds yi (which are different from both x and 
all Zi), then two of the Zi must coincide. Note that the formulas introduced up to 
now closely mirror the formula in [Hem96] . The major differences and additions 
in the construction follow now. The third formula we use ensures the relation ~ 
mentioned above is an equivalence relation: 

Definition 3. Let (fi'^^ be the first-order formula 

{{x'^y)AyRz) xRz) A {{x y) A zRy) zRx). 

This formula ensures that ~- "equivalent" worlds have the exact same in- and 
outgoing edges, hence it forces ~ to be an equivalence relation in reflexive models. 
The conjunction of the formulas above combines the first-order aspects of the 
grid that wo can force with imiversal formiilas over the basic frame language: 



Definition 4. Let tp^"'^ := tpistep A ip2-step A (fi^ 



5.3 Properties of abstracted frames 

We now formally define abstractions of frames, which as mentioned before are 
obtained by compressing ^-equivalence classes into a single world. 

Definition 5. For a reflexive frame F = {W,R), where F \= (^~, we define the 
abstraction of F, denoted with ^/~, to be the frame (w/^^R/^) ^ where is 
the set of '^-equivalence classes ofW, and [w]R/r^[w'] if and only ifwRw'. 

The relation above is well-defined, since if w ^ w' and w ^ w' , then 
wRw implies w'Rw, and this implies w'Rw' (by ^^). We now show that for a 
frame that satisfies the formula yiS"d^ j^g abstraction has two key properties of 
the grid frame, and additionally is reflexive — rcflexivity docs not actually help in 
establishing the undecidability result for global satisfiability, but as commented 
before will make it easier for us to later move to the (local) satisfiability problem. 



Lemma 1. Let F = {W,R) be a reflexive (p^"''' -frame. Then satisfies the 
following properties: 

1. is reflexive, 

2. each world [w] in ^'/~ has at most two direct successors different from [w], 

3. for each world [w] in ^/~, there are at most three worlds that can be reached 
on a path from [w\ of length two that does not use any reflexive edge. 

Proof. 1. Let [w] be an equivalence class. Since R is reflexive, we know that 
wRw, hence due to the definition of (M'.-R)/^, we have that [77;] [w] . 

2. Assume that some equivalence class [w] has direct successors [wi], [W2], and 
[ws] in (w,R)/^^ where all of these four classes are distinct. Obviously, for 
i G {1, 2, 3}, we have that {[wi], [w]) ^ since otherwise [wi] = [w] would 
follow due to the definition of ~. By the properties of <^i-step! it then follows 
that there are i,j such that 1 < t < j < 3 and WiRwj and wjRwi, thus 
Wi ~ Wj, and hence [wi] — [wj], a contradiction. 

3. This follows very similarly: Assume that there is a class [x] with direct suc- 
cessors [yi], [2/2], [2/3], and [j/4], and classes [zi], [z2\, [zs], [2:4] such that for all 
i,j we have [yi] ^ [x], [yi]R/^[z.i\, [yi] ^ [z^], and for i ^ j wc have [zi] ^ [zj]. 
Since [a;]^/~[yi], there is an edge xRyi for all i. If there was an edge yiRx 
for some i, then yi x and thus [a;] = [yi] would follow, hence there is no 
such edge. Similarly, since yi^/^Zi but [yi] ^ [zi], there is no edge ZiRyi. 
Therefore, since (H^, i?) |= <^2-step; we know that there exist i j with ZiRz^ 
and ZjRzi, i.e., zi ~ Zj. This implies [zi] = [zj], a contradiction. 

□ 

We therefore know that the abstracted frame satisfies the main "forbidden 
subgraph" properties of the grid frame — as mentioned before, we cannot hope 
to enforce other properties of the grid frame using only universal first-order 
formulas. For ensuring the remaining properties, we therefore use modal formulas 
and propositional variables. There are two main differences between the grid 
frame and the class of abstractions of ip^"'^-{Ta.mes: First, worlds in abstractions 
of (p^"'^-b:a.mes that correspond to more than one world in the original frame 
are always reflexive. Second, the class of (p^^'^-iiames (and thus the class of its 
abstractions) is subframe-closed. Essentially, abstractions of (^snd.frames can be 
seen as subframes of the reflexive closure of the grid frame. 

5.4 Expressing the grid: Modal aspects 

Above, wc have expressed the universal first-order properties of the grid frame in 
the formula (^^"d^ consider the second part of our abstraction process: 

the valuation of the propositional variables. We will use the interplay between 
modal formulas and the frame properties ensured with the results in the previous 
section to address the following issues: 

— We need to ensure that the abstraction is "sound," i.e., leaves crucial modal 
properties of the models invariant. The main issue is that we need to force all 



"relevant" variables to have the same value in all ~-equivalent worlds. This 
leads to a well-defined propositional assignment for the abstracted frame, and 
moreover ensures that truth of "relevant" modal formulas remains invariant 
when moving to the abstraction of a model. 

— As mentioned above, the abstractions constructed in the previous section 
are necessarily reflexive. To simulate the (non-reflexivc) grid, wc will replace 
the D-operator with a construction that ensures that □■0 only requires the 
formula to be true in the successors w' 7^ w of a world w. 

— We have to enforce the "positive" properties of the grid frame, i.e., that 
every world in fact does have two distinct successors. 

Our abstraction does not take into account all variables, but only a subset 
denoted with P — this will contain all variables appearing in the input formula 
tjj for the Global-Grid-Sat problem that we will reduce from. 

Definition 6. Let P be a set of propositional variables, and let M = {W,R,Tr) 
be a reflexive ip'^g-model. We define the model as 

where the assignment '^/~ makes the variable p true in an equivalence class [w] 
if and only if it is true in all elements of [w], and lets all propositional variables 
not in P be false everywhere. We call the abstraction of M. 

We will later only consider abstractions of models where the truth value of 
a variable p ^ P docs not depend on the representative of a class [w] . This will 
be enforced to ensure that is a sound abstraction of with respect to the 
propositional variables in P. For models that obey this restriction, the above 
truth assignment will then be equivalent to setting p true in [w\ if there is some 
w G [w] where p is true in the original model. We say that ~ respects P in a 
model M if w ~ implies that each variable p e P is true in w if and only if it 
is true in w' . We often omit the model M if clear from the context. 

It is easy to see that this property implies that the abstraction introduced is 
indeed sound, i.e., preserves truth of all modal formulas — at least as long as we 
only consider reflexive models that also satisfy the first-order formula (^^: 

Lemma 2. Let P be a set of propositional variables, let M be a reflexive (^^- 
model such that ^ respects P in M . Then for all w € W, and all modal formulas 
tp with YAR{tp) C P, M,w ^ i; if and only if a^/^, [w] \=tp. 

Proof. We prove the claim by induction on the construction oi tp. If tp is a 
propositional variable p € P, then this follows from the prerequisites, since for 
w ~ w', p is true at w if and only if p is true at w'. The induction step for 
propositional operators is trivial. Therefore, assume that 4' is of the form D^, 
and the claim holds for ^. Since wRw' is true if and only if [■u;]^/~[w'], the 
following is true: 



M,w^a(, iff for all w' with wRw' , it holds that M,w' \= 

iff for all w' with wRw' it holds that m/^, [w'] |= ^ 

iff for all w' with it holds that [u;'] |= ^ 

iff M/^, [w] h DC- 

We therefore obtain the following: If M is a reflexive modal model that 
satisfies the formula (^^nd and in which ~ respects P, then its abstraction is a 
subframe of the reflexive closure of the grid that satisfies the same formulas ip 
as M does (for formulas ip with VAR(7/') C P). Therefore, if we can enforce that 
~ respects P, we have can enforce the abstractions of our models to exhibit the 
"forbidden subgraph" -features of the grid, without changing the set of satisfied 
modal formulas. To enforce that respects P, we define the following: 

Definition 7. For a set P of propositional variables, let V'resp defined as 



a{{ds = d) V (4 = {d + 2) mod 8) V (rfg = {d + 3) mod 8)) 

A{p ^ □((4 = d) p)) 

A{p =^ □((4 = d) => m 

Here dg is a variable over the natural numbers 0, . . . , 7. This obviously can 
be represented by three propositional variables dg, d|, and dg as follows: 

dg = f^- (df Ad|Ad|), 
dg = 1 -H- (df AdfAdg),... 
dg = 7 -H- (dg A d| A d§). 

For a model M and a world w G M, with dg,{w) we denote the unique value 
d G {0, . . . , 7} such that MjW \= (dg = d). To increase readability, we often omit 
the "mod 8" from the discussion and write dg = d for dg = d mod 8. 

We now prove that the formula V'resp works as intended, if it is globally 
satisfied in a model — recall that a model M globally satisfies a modal formula 
ip if M, w \= il> for all worlds w of M. 

Lemma 3. Let P be a set of propositional variables, let M be a reflexive t^s"'*- 
model that globally satisfies i^resp- Then respects P U {dg} in M. 

Proof. Let w ~ w' in M, and let d = dg(t«). We first prove that M,w' \= 
(dg = d), i.e., that the values of dg are identical in ^-equivalent worlds. Suppose 
that this is not the case. Since M globally satisfies V'resp; there is an edge 
wRw', we know that M,w' \= (dg = (d + 2)) or M,w' \= (dg = (d + 3)). 
Since there also is an edge w'Rw, it also follows from V'resp that M,w \= (dg G 
{d-|-2-|-2,d-|-2-|-3,d-|-3-|-2, d-|-3-|- 3}), which is a contradiction, since 
M,w \= (dg = d). We therefore know that M, w' \= (dg = d) as claimed. Now let 
p be a variable from P. Since wRw' and M, w \= V'resp from M , w \= p it follows 
that M, w' \= p, and M,w \=p implies M, w' \= p. Therefore, ~ respects P as 
required. □ 



The above lemma together with the earher Lemma 2 and the fact that 
VAR(^^gp) = {dg} imply the following: 

Corollary 1. Let M be a reflexive (p'^g-model such that M globally satisfies 
tpresp- Then for all formulas tp with VAR('^) C Pu{ds}, and all worlds w G M, 
we have that 

M,w \= ■ip if and only if *^/~, [w] \= ip. 
In particular, ■'^/^ globally satisfies V'^sp- 

The variable ds also allows to express "positive" conditions of the grid, i.e., 
the existence of certain successor worlds, and to reason about direct successors of 
a world w that are not ^-equivalent to w itself. In the sequel, we call successors 
like this non- symmetric successors of w. Similarly, a non-reflexive successor of 
w is a direct successor w' of w with w ^ w' . This does not mean that w' is an 
irreflexive world, but that it is one reachable from w with an edge other than the 
reflexive loop. The following formula now ensures that worlds that are connected 
with a direct edge, but are not ^-equivalent, have different values for dg. 

Definition 8. Let be defined as follows 

7 

^succ ^ ^ ((^g = d) ^ 0(d8 =d + 2)A 0{ds = d + 3)) 

d=0 

This formula expresses that a world w with ds{w) = d has direct successors 
with ds = rf-F 2 and dg = rf + 3. We will later identify the "-F2"/"-|-3" -successor 
with the "upper" / "right" neighbor in the grid. If additionally the model globally 
satisfies V'resp' t^®"^ from neither of these successors, the world w is reachable 
in one step: Prom the deflnition of V'resp' follows that all direct successors of 
the two ones whose existence is forced by ijj^^'^'^ must have dg-values out of the 
set {d + 2, d + 4, d + 5, d + 3, d + 5, d + 6}, none of which applies to the world w 
itself. More generally, every world w' ^ w reachable from w with at most two 
steps has a different rfg -value than w. 

In addition, the successors with dg-values oi d + 2 and d + 3 cannot be 
connected with a direct edge in models satisfying Vresp- Hence, each world has 
two successors such that all of the three involved worlds arc ^-incquivalcnt in 
the abstraction, these worlds will give rise to three different equivalence classes. 

It follows from the above that in (^^nd.jjjQ^jgjg globally satisfying the formula 
tpfespj ttis formula Ad=o(('^8 = d) =^ □((ds d,) ^ "0)) is true in a world w if 
and only if ip is true in all non-symmetric, non-reflexive successors of w. 

5.5 coRE-hardness of global satisfiability 

We now show coRE-hardness for the global satisfiability problem on reflexive 
frames that satisfy (^s"d_ itself, this result is not stronger than what was 
already established in [Hem96], except for the fact that our formula only uses 
the basic frame language, i.e., does not use equality. However, the real benefit 



of the result in this section will become apparent in the next section: The class 
that wc define here allows us to easily reduce global to (local) satisfiability. 

In Lemma 3, we have seen that if we can ensure that the formula V-'resp 
globally satisfied in a reflexive (^^"^"^-model, then ~ respects P and in this case 
Lemma 2 tells us that our abstraction is sound, i.e., preserves truth values of 
modal formulas. Since the formulas V'resp ^^"^ tp^^'^'^ allow us to ensure that ~ 
respects P and that every world has the two distinct successors as in the grid 
frame, we therefore can use the construction from the previous section to prove 
coRE-hardness in the case that we are able to enforce V'resp ^ tp^^"^"^ globally. 

Recall that Global-Grid-Sat remains coRE-hard when the input is restricted 
to formulas ip with md {ip) < 1. We therefore only consider such inputs for 
Global-Grid-Sat from now on, and define our reduction as follows: 

Definition 9. Let ip he an input for Global-Grid-Sat with md ('^) < 1. Let 
P = VAR(V'), and let g{xp) be defined inductively as follows: 

- If ^ is a variable p, then g{ip) = p, 

- gh'ip) = -^gW, 

- g{D^) = ALo((4 = d) ^ □((4 ^d)^ gim- 

The reduction f is now defined as f{tp) = g{'ip) A ip^esp ^ V'*"'^'^- 

The only non-obvious part of the definition is the handling of the D-operator. 
As argued above, the translation of □V' requires ip to be true in all non-reflexive, 
non-symmetric successor worlds of the current one. This will be crucial when we 
consider abstractions of models: The non-symmetric successors of a world w in 
a model M directly correspond to the non-reflexive successors of the class [w] in 
the model '^/r^. We now prove that the reduction is correct (see Appendix). 

Theorem 3. Let ip be an instance o/ Global -Grid -Sat with md (V') < 1. Then ip 
is a positive instance o/ Global -Grid -Sat if and only if f{tp) is globally satisfiable 

on a reflexive (p^"'^ -model. 

Proof. In the following, let P again be the set of variables appearing in tp. First 
assume that ^ is a. positive instance of Global-Grid-Sat, i.e., there is a grid model 
M = {N xN,R, tt) such that M, {i,j) \= tp for all i,j e N. We define the model 
M as the one obtained from M as follows: M = (N x N, tt), where 

- R = RL) {{{i,j), {i,j)) I i, j G N} , i.e., R is the reflexive closure of R, 

- TT agrees with n on YAR{tp), and M, {i,j) \= {ds = {3i + 2j)). 

Again, ds can easily be expressed using three prepositional variables. It is 
immediate that M is reflexive and satisfies ifi^"*^ (note that in M, we have that 
w) ~ w' if and only w = w'). By choice of tt, it is also obvious that M globally 
satisfies \= i/'resp ^^'^ ip^^'^'^. 

It remains to show that M globally satisfies g{tp). Since M globally satisfies 
tp, it suffices to show that for all subformulas x of tp, and for all i,j e N, it holds 



that M, 1= X if and only if M, \= g{x)- We prove this by induction on 
the construction of x- Clearly, the only non-trivial case is when x = for some 
^. Due to induction and since M is based on a grid frame, the following holds: 

M, h ne iff M, (^ + 1, h e and M, + 1) ^ ^ 

iffM,(z + l,j) ^5(0 and M{i,j + l)^g{i) 

mM,{i,j)^n{{d8^d^{{i,j))) =^ 5(0) 

iSM,{i,j)\=g{n^). 

Hence we know that M, (0,0) globally satisfies f{tp), as required. 

For the other direction, assume that f{4>) is globally satisfied on a reflexive 
(^s"'i-niodel M = {W,R,Tr). From M, wc now obtain a grid model as follows: 
We first consider the abstraction of M, which, since M is a (^s''"^-model and 
M globally satisfies tp^^'^'^, is essentially grid- like due to Lemma 1. Since M also 
globally satisfies V-'respi this abstraction is sound, i.e., still globally satisfies g(tp). 
We can then easily modify to obtain a model that in fact is a grid and 
globally satisfies tp. More formally, let M^^.^^ be defined as {W^^.-^^, R'^j.^^.tt^^^^^), 
where 

- RU = {(N, K]) G I ds{[w]) ^ dsiiw'])}, 

- ttO = V~- 

The above choice of i?" is well-defined, since due to Lemma 3, we know that 
the value of ds does not depend on the choice of the representative of a ~- 
equivalence class [w]. By construction, since M globally satisfies V'resp' '^^ know 
that Mgj.jjj is exactly the model with the reflexive edges removed. Since due 
to Corollary 1, we know that globally satisfies V'resp) and satisfaction of this 
formula clearly is invariant under removing reflexive edges, it follows that M^^^^ 
also globally satisfies fAresp- 

We now prove that for all sub formulas x of -0 and all worlds w G M, we have 
that M,w \^ g{x) if and only if Mg^.;^, [w] ^ x- Since M globally satisfies ■i/'^sp' 
we know from Corollary 1 that M, w \= g{x) if and only if *^/~, [iv] \= g{x)- (Note 
that VAR(g(x)) = VAR(x) U {d^} C PU {dg}-) It therefore suflices to prove that 
^/-^, [w] \= g{x) Mg^jj, [w] ^ X- We prove the claim by induction on x- Since 
the only difference between Mg^.;^ and is the set of edges between worlds, the 
only interesting case is when x = n^- Due to Corollary 1, globally satisfies 
tpfesp- Hence the non- reflexive successors of a world [w] in are exactly those 
successors [w'] of [w] with dsi[w']) ^ d^(}(w\) (recall that d%{w) only depends on 
the equivalence class [w] due to Lemma 3). 

Since g{x) = Ad^oiids = d) =^ a{{ds ^ d) ^ g {£,))), we have the 
following: 



iff M/^, [y,] ^ f\l^^(ds = d)^ □((ds ^d)^ gm 
iff M/^, [w'] \= g{C) for all [w'] ^ [w] with ([w], [w']) € 
iff (induction) .j, [w'j ^ ^ for all [w'] + \w\ with ([w], [w']) € «/~ 
iff (def. of Ml,^) [«/] h e for all [to'] with (H, [w']) G ^o^d 

iffMg%,N hx- 

This completes the proof of the above claim. Since M globally satisfies g{tp), 
this implies that M^^^^ globally satisfies tp. We now construct from M^^^^ a grid- 
model Afgrid that still globally satisfies ijj as required. Recall that M also satisfies 
the first-order formula (f^"'^, and that M^^^^ is obtained form a^/^ by removing 
edges. Therefore, Lemma 1 implies that from each world in M^^^^ there are at 
most two worlds reachable in one step, and at most three worlds reachable in 
two steps. Further, since M globally satisfies ip^'^^^, we know that each world 
in has at least two distinct successors. Since M^^.-^ is obtained from M by 
removing refiexive edges, M^^^^ also has this property. 

The values of in the individual worlds induces an ordering on the direct 
successors of a world [w] in M^^^^. First, recall that due to Lemma 3, the values 
of ds depend only on the equivalence of the worlds, hence we may use dslw] 
to denote the dg-value of all worlds in the equivalence class [w]. Due to the 
properties of the abstraction, [w] has a unique direct successor world [w]'^ with 
cZ8([ui'^]) ~ ds{[w])+2, and a unique direct successor world [w]^ with dg{[w^]) = 
ds{[w]) + 3. In addition, since due to Lemma 1, [w] can only reach three worlds 
on a path of length two that does not use any reflexive edges, we know that 
[{[w]'''^, [w]^^, ['U']^^} I ~ 3, hence two of these worlds must be the same. 

Due to the distribution of the dg-values, it follows that [w]^^ ~ [w]^^, since 
these are the only two of the mentioned worlds that share the same ds-value, 
namely ds{[w]) + 5. 

Thus can be written as a grid model using standard unfolding tech- 

niques: We define the grid model Mg^id as follows: 

— the world (0, 0) is a copy of some world [w] of M^^^^. 

— if is a copy of the world [w]ij, then let the worlds and (i, j+1) be 
copies of the worlds [w]~^j and [w]lj of Mgj.jj, and ensure that for 

the same copy of [w]^"^ = [w]"^^ is used. 

It is clear that the set of modally satisfied formulas does not change in the 
step from Mgj.;^ to Mgrid, and that Mgrid is indeed a grid model. Therefore, Mgrid 
is a grid model that globally satisfies ip as required. □ 

We mention that one can easily to use the first-order formula to force the 
models to be reflexive, using the clause xRx. However, to be able to prove 
undecidability for satisfiability instead of global satisfiability, it is crucial to leave 
open the possibility of non-reflexive worlds, as we will see in the next section. 



5.6 Removing globalness 

The construction in the preceding section sliowecl liarclness for gfobal satisfia- 
bility for reflexive (^s"d frames. To obtain our coRE-hardness result for (local) 
satisfiability, we now express this global quantification with only the first-order 
frame language and the modal language. 

The main idea of the proof is the following: The construction forces the 
existence of a "universal" world Wi,, i.e., a world that has an outgoing edge to 
every other world in the model. Since this is an "existential" and not a "forbidden 
subgraph" property, we cannot express this as a universal first-order formula 
directly. We therefore use the following construction: We require that for every 
pair of a world Wu that is not reflexive, and every world w that has an incoming 
edge, there is an edge from Wu to w. This ensures that if the model contains an 
irreflexive world w„, then Wu is universal at least with respect to worlds that can 
be reached from any other world at all. In particular, w„ is universal with respect 
to the submodel rooted at Wu- Additionally, we require that any world that has 
an incoming edge is reflexive. We therefore have established that if there is a 
world Wu that is irreflexive, then every world reachable from Wu in any number 
of steps is connected to w„ directly, and every such world is reflexive. 

These conditions can be enforced with the following formula: 

Definition 10. Let yi""™ be the universal first-order formula 

[xRy yRy) A {wuRwu => {xRy WuRy))- 

The existence of an irreflexive world Wu can easily be enforced with the modal 
formula u A Du, where m is a new variable. We then enforce the formula tpS''"^ 
constructed in the previous section only on reflexive worlds, and can thus identify 
the "reflexive part" of a model with a model of the type as considered in the 
previous section. In particular, we know that global satisfiability of a formula of 
the form f{4') on the "reflexive part" of our models is coRE-hard, where / is 
the function used in the reduction from Theorem 3. We then use the universal 
world Wu to express the global satisflability problem with a single D-operator. 

We therefore obtain the following theorem: 

Theorem 4. There exists a universal first-order formula (^^'"^' over the basic 
frame language such that K(<^""')-SAT is coRE-/iard. 

Proof. From Theorems 2 and 3, we know that the global satisflability for formu- 
las of the form f{ijj) on reflexive (^srid -j-^^Qj^^jg coRE-hard. 

In order to "simulate" global satisfiability, we want to add a "universal world" 
to our models, i.e., a world that is connected to every world in the model except 
itself. The reflexivity of worlds will be used to distinguish between the univer- 
sal world and other worlds in the model. As mentioned above, the effect of the 
formula t^""'^ is that any world w„ which is non-reflexive does not have a pre- 
decessor, and is connected in one step to every world that that docs have one. 
In particular, Wu is a "universal world" with respect to the submodel generated 
by Wu- 



Let i^s"d = Va;^ . . . Vxfe<^5^g/^gi(xi, ■.■,Xk), where ■^kernel quantifier-free. To 
enforce (p^"'^, but only on the submodel containing all reflexive worlds, we deflne 

<^?eff := {XlRxi A ■ • ■ A XkRXk) ^kcmdC^^l' • • • ' ^k)- 

We can now define the complete universal first-order formula (p''"**' such that 
K((^fi°ai).sAT is coRE-hard as follows: 

^-ifinal . -univ a ^iS^'i^l 

(/? :=(p A . 

We show that a modal formula ■(/' is globally satisfiable on a reflexive (^snd_ 
frame if and only if u A Ou A □V' is satisflable on a (^^"'^'-model. Since deciding 
whether the former holds is coRE-hard due to Theorems 2 and 3, this proves 
the theorem. 

First assume that M = (W, i?, tt) is a reflexive (p^"'^-model and that M 
globally satisfies ip. We define a model M = {W, R, tt) such that 

— W = W L) {wu} ■ where Wu is a new world, 

- R = RU {{wu, w) \w eW}, 

— TT = TT, except that the new variable u is true at w„ and false at every world 
other than w„, and the truth values of the remaining propositional variables 
at Wu are arbitrary. 

It is obvious from the construction that M is based on a (p^'^^^-hame and 
that M,Wu \=uADuA Dip. 

For the converse, let M = {W, R, tt) be a model based on a (^'^'^'^^-frame, and 
let Wu G W be such that M, Wu |= uADmADV-'. Note that since M, Wu \= mADm, 
Wu clearly is irrefiexive (u holds in Wu, but not in any successor of Wu, hence Wu 
cannot be one of these successors). Now let M = {W, R, w) be defined as follows: 

- W = {w \ {wu,w) € R}, 

- R = Rr] {W xW), ^ 

— w = IT restricted to W. 

Note that M is reflexive by the construction of (^S*^"**', and hence, since M \= 

<^fgjf , and satisfaction of universal first-order formulas is invariant under deleting 
worlds, it follows that M is based on a refiexive (f^"'^ -frame. It remains to prove 
that M,w \= for all w gW. Since M, w„ |= 0%p, it follows that M,w \= tp for 
all w E W. It therefore it suffices to show that for all subformulas x of -0 and 
for all w G W, that M,w ^ x if ^ind only if M, w \= x- We show the claim by 
induction on the construction of x, and the only non- trivial case is when x = 
for a modal formula ^. 

First assume that M,w \= D^, and let w' be a successor of w in M. Since 
-R C i?, it follows that w' is also a successor of w in M. Since M,w \= D^, this 
implies that M, w' \= ^. Due to induction, it follows that M, w' |= ^ as required. 

For the converse, assume that M,w ^ D^. Then there is some world w' gW 
such that hat wRw' and M,w' ^ ^. Since wRw', and the world w„ is irrefiexive 



in M due to the above, and M \= (^""'"^, it follows that WuRw' is an edge in M. 
Therefore, by definition it holds that u/ G W, and due to the definition of R 
we have that wRw' in M. Since due to induction we know that M, w' ^ ^, it 
follows that M,w ^ as required. This completes the induction and therefore 
the proof of the theorem. □ 
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